Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials CVE-2026-54249, GHSA-h7p7-w5gc-xj3w, PYSEC-2026-3692, PYSEC-2026-3693 | Medium | 0.3% | 29 Jul, 2026 | PyPI pydantic-ai PyPI pydantic-ai-slim |
linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect CVE-2026-67435, GHSA-4jc5-g844-4x33, PYSEC-2026-3578 | Medium | 0.5% | 29 Jul, 2026 | PyPI linuxfabrik-lib |
Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules) CVE-2026-67429, GHSA-2956-977x-2w3r, PYSEC-2026-3568 | Critical | 0.6% | 29 Jul, 2026 | PyPI flyto-core |
Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata) CVE-2026-67428, GHSA-pgwh-4jj4-qm8v, PYSEC-2026-3572 | High | 0.4% | 29 Jul, 2026 | PyPI flyto-core |
Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted CVE-2026-67427, GHSA-hr7p-wg7r-hg9m, PYSEC-2026-3570 | High | 0.4% | 29 Jul, 2026 | PyPI flyto-core |
Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration CVE-2026-67426, GHSA-jx74-cqjv-2c67, PYSEC-2026-3571 | Critical | 0.4% | 29 Jul, 2026 | PyPI flyto-core |
Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url CVE-2026-67425, GHSA-qq9q-xgm3-xv9g, PYSEC-2026-3573 | High | 0.4% | 29 Jul, 2026 | PyPI flyto-core |
Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation CVE-2026-67424, GHSA-c9hr-64h3-gxpc, PYSEC-2026-3569 | High | 0.3% | 29 Jul, 2026 | PyPI flyto-core |
pip would incorrectly handle doubly-encoded package URLs from indexes CVE-2026-13346, GHSA-qwm4-qh6w-59xr, PYSEC-2026-3721 | Medium | 0.3% | 29 Jul, 2026 | PyPI pip |
proot-distro has a Container Isolation Bypass via Crafted Restore Archive CVE-2026-54727, GHSA-7h3g-4w2f-fj2f, PYSEC-2026-3607 | High | 0.2% | 29 Jul, 2026 | PyPI proot-distro |
`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive CVE-2026-54574, GHSA-9xq3-3fqg-4vg7, PYSEC-2026-3608 | High | 0.2% | 29 Jul, 2026 | PyPI proot-distro |
olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193 GHSA-wchh-9x6h-7f6p | Medium | Not scored | 29 Jul, 2026 | PyPI matrix-commander |
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive CVE-2026-50558, GHSA-f42x-p2mx-hm8r, PYSEC-2026-3606 | Medium | 0.4% | 29 Jul, 2026 | PyPI penelope-shell-handler |
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field CVE-2026-54654, GHSA-wjv6-jcfj-mf9r, PYSEC-2026-3566 | High | 0.2% | 28 Jul, 2026 | PyPI datamodel-code-generator |
datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs` CVE-2026-55389, GHSA-8359-h9fx-j6v9, PYSEC-2026-3558 | High | 0.5% | 28 Jul, 2026 | PyPI datamodel-code-generator |
`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field CVE-2026-54653, GHSA-386q-5hp3-95m9, PYSEC-2026-3555 | High | 0.7% | 28 Jul, 2026 | PyPI datamodel-code-generator |
datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding CVE-2026-55391, GHSA-vx7x-vcc2-c44g, PYSEC-2026-3565 | High | 0.3% | 28 Jul, 2026 | PyPI datamodel-code-generator |
`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data CVE-2026-54656, GHSA-8m8r-38jm-f355, PYSEC-2026-3559 | High | 0.3% | 28 Jul, 2026 | PyPI datamodel-code-generator |
datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default) CVE-2026-54690, GHSA-954p-556p-r752, PYSEC-2026-3560 | High | 0.4% | 28 Jul, 2026 | PyPI datamodel-code-generator |
datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements CVE-2026-55415, GHSA-5578-w22f-pfx9, PYSEC-2026-3557 | High | 0.5% | 28 Jul, 2026 | PyPI datamodel-code-generator |
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description CVE-2026-54621, GHSA-j884-q54q-mmx3, PYSEC-2026-3561 | High | 0.2% | 28 Jul, 2026 | PyPI datamodel-code-generator |
`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator CVE-2026-54655, GHSA-m34r-v34r-rf9q, PYSEC-2026-3562 | High | 0.2% | 28 Jul, 2026 | PyPI datamodel-code-generator |
datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas CVE-2026-55403, GHSA-r5vv-ff45-prp2, PYSEC-2026-3563 | Low | 0.3% | 28 Jul, 2026 | PyPI datamodel-code-generator |
datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects CVE-2026-54691, GHSA-rfr2-mq9m-x2qx, PYSEC-2026-3564 | High | 0.3% | 28 Jul, 2026 | PyPI datamodel-code-generator |
datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate CVE-2026-55390, GHSA-442q-2j6p-642g, PYSEC-2026-3556 | High | 0.6% | 28 Jul, 2026 | PyPI datamodel-code-generator |
pytonapi has a Webhook Custom Path Authentication Bypass CVE-2026-54635, GHSA-3fcr-jvgp-7f58, PYSEC-2026-3614 | High | 0.5% | 28 Jul, 2026 | PyPI pytonapi |
QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding CVE-2026-54609, GHSA-85rg-p3fr-xc2f, PYSEC-2026-3615 | High | 0.5% | 28 Jul, 2026 | Maven com.quietterminal:qti-neon PyPI qti-neon npm qti-neon |
Malicious release: Malicious code in vtranalytic (PyPI) MAL-2026-11156 | Malicious | Not scored | 28 Jul, 2026 | PyPI vtranalytic |
UNKNOWN READ in bytes1_char_at OSV-2026-1084 | Not scored | 28 Jul, 2026 | PyPI mrab-regex | |
UNKNOWN READ in _regex.cpython-311-x86_64-linux-gnu.so OSV-2026-1072 | Not scored | 28 Jul, 2026 | PyPI mrab-regex | |
UNKNOWN READ in bytes1_char_at OSV-2026-1070 | Not scored | 28 Jul, 2026 | PyPI mrab-regex | |
Malicious release: Malicious code in cfgzen (PyPI) MAL-2026-11094 | Malicious | Not scored | 27 Jul, 2026 | PyPI cfgzen |
Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit BIT-thrift-2026-66053, CVE-2026-66053, GHSA-hwrj-9rr4-24xh, PYSEC-2026-3927 | Medium | 0.3% | 27 Jul, 2026 | PyPI thrift |
Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop BIT-thrift-2026-43871, CVE-2026-43871, GHSA-8wv5-x4w7-5gww, PYSEC-2026-3926 | High | 1.0% | 27 Jul, 2026 | Go github.com/apache/thrift Maven org.apache.thrift:libthrift Packagist apache/thrift PyPI thrift |
Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability BIT-thrift-2026-41608, CVE-2026-41608, GHSA-6pjx-3pjc-mrj8, PYSEC-2026-3925 | High | 1.0% | 27 Jul, 2026 | PyPI thrift |
Malicious release: Malicious code in random-ua-generator (PyPI) MAL-2026-11068 | Malicious | Not scored | 26 Jul, 2026 | PyPI random-ua-generator |
Malicious release: Malicious code in blessclient (PyPI) MAL-2026-11067 | Malicious | Not scored | 25 Jul, 2026 | PyPI blessclient |
libp2p: yamux connection DoS via oversized data frame CVE-2026-73568, GHSA-hmj8-5xmh-5573, PYSEC-2026-3681 | High | 0.5% | 24 Jul, 2026 | PyPI libp2p |
NLTK vulnerable to Eval Injection via collocations CLI arguments CVE-2025-71408, GHSA-848c-c2cx-j7qx, PYSEC-2026-3657 | High | 0.3% | 24 Jul, 2026 | PyPI nltk |
Malicious release: Malicious code in trongridy (PyPI) MAL-2026-11051 | Malicious | Not scored | 24 Jul, 2026 | PyPI trongridy |
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review CVE-2026-73652, GHSA-47w6-gwp4-w6vc, PYSEC-2026-3703 | High | 0.4% | 24 Jul, 2026 | PyPI vantage6 |
GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573) CVE-2026-73622, GHSA-94p4-4cq8-9g67, PYSEC-2026-3951 | High | 0.5% | 24 Jul, 2026 | PyPI GitPython PyPI gitpython |
Malicious release: Malicious code in discordnv (PyPI) MAL-2026-11050 | Malicious | Not scored | 24 Jul, 2026 | PyPI discordnv |
Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids) CVE-2026-59714, GHSA-x2ff-v5v8-m75m, PYSEC-2026-3605 | High | 0.5% | 24 Jul, 2026 | PyPI open-webui |
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion GHSA-464c-974j-9xm6, GO-2026-6093 | Low | Not scored | 24 Jul, 2026 | Go github.com/aws/aws-cdk-go/awscdk Go github.com/aws/aws-cdk-go/awscdk/v2 Maven software.amazon.awscdk:aws-cdk-lib Maven software.amazon.awscdk:codebuild +7 more |
GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution CVE-2026-73625, GHSA-r9mr-m37c-5fr3, PYSEC-2026-3953 | High | 0.9% | 24 Jul, 2026 | PyPI GitPython PyPI gitpython |
GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks CVE-2026-73623, GHSA-6p8h-3wgx-97gf, PYSEC-2026-3952 | High | 0.8% | 24 Jul, 2026 | PyPI GitPython PyPI gitpython |
GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled) CVE-2026-73624, GHSA-fjr4-x663-mwxc, PYSEC-2026-3995 | High | 0.6% | 24 Jul, 2026 | PyPI GitPython PyPI gitpython |
GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE) CVE-2026-69097, GHSA-3rp5-jjmw-4wv2, PYSEC-2026-3981 | High | 0.3% | 24 Jul, 2026 | PyPI gitpython |
PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path CVE-2026-61632, GHSA-9xwg-3r6f-jcx2, PYSEC-2026-3609 | Medium | 0.4% | 24 Jul, 2026 | PyPI pymdown-extensions |